[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]

Re: Samba



> I've tried it. still no use. It gives me you need a password to connect to
> this network. NO USERNAME and message also includes //linuxmc/IPC$
> and password.
Sendme ur ######  smb.conf  ##### file offlist ##### and also tell me what
kind of shares are there on ur 95 /98 m/c
Please specify 95 or 98
Is there any Win NT server as PDC on the Network?
If yes ...do the 95 /98 m/c connect to the domain

In order for a Samba server to join an NT domain, you must first add the
NetBIOS name of the Samba server to the NT domain on the PDC using Server
Manager for Domains. This creates the machine account in the domain (PDC)
SAM.
Assume you have a Samba server with a NetBIOS name of SERV1 and are joining
an NT domain called DOM, which has a PDC with a NetBIOS name of DOMPDC and
two backup domain controllers with NetBIOS names DOMBDC1 and DOMBDC2.
In order to join the domain, first stop all Samba daemons and run the
command
smbpasswd -j DOM -r DOMPDC
as we are joining the domain DOM and the PDC for that domain (the only
machine that has write access to the domain SAM database). If this is
successful you will see the message:
smbpasswd: Joined domain DOM.
in your terminal window.
This command goes through the machine account password change protocol, then
writes the new (random) machine account password for this Samba server into
the a file in the same directory in which an smbpasswd file would be stored
(normally :
/usr/local/samba/private
The filename looks like this:
<NT DOMAIN NAME>.<Samba Server Name>.mac
The .mac suffix stands for machine account password file. So in our example
above, the file would be called:
DOM.SERV1.mac
This file is created and owned by root and is not readable by any other
user. It is the key to the domain-level security for your system, and should
be treated as carefully as a shadow password file.
Now, before restarting the Samba daemons you must edit your smb.conf file to
tell Samba it should now use domain security.
Change (or add) your
"security ="
line in the [global] section of your smb.conf to read:
security = domain
Next change the
"workgroup ="
line in the [global] section to read:
workgroup = DOM
as this is the name of the domain we are joining.
Finally, add (or modify) a:
"password server ="
line in the [global] section to read:
password server = DOMPDC DOMBDC1 DOMBDC2
These are the primary and backup domain controllers Samba will attempt to
contact in order to authenticate users.

There is lots more of documentation to be studied and I can't post long
HOWTOS else the listers will spam me.
Even this length I have taken the liberty coz ListAdmin aka Raju is out of
TOWN ;-)
####################################################################
Further have you chmod the samba directories to 0777 and chown nobody cggrp
nobody
First you shud endeavour to connect and then start building security
features
####################################################################
Regards,
Sunil Dhaka